9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function create_xor_ipad_opad allowing attackers to potentially write arbitrary files or execute arbitrary commands.
AI Analysis
Arbitrary file write and command execution vulnerability in openmptcprouter
Basic Information
ID
CVE-2025-65882
Source
mitre
Published
Dec 9, 2025 at 00:00
Modified
Dec 11, 2025 at 19:37
Affected Product
Vendor
Ysurac
Product
openmptcprouter
Version
0.64
Affected Versions
n/a n/a n/a
CWE Classification
AI Assessment
AI Score
9.8 / 10
AI Severity
Critical
Vendor
Ysurac
Product
openmptcprouter
Version
0.64